Skip to main content

Free CRM for accountants & bookkeepersFree for two months (60-day trial) · no per-user fees

Access control & data protection

Stop Client Data Leaking Through WhatsApp and Email

If it's not in the task, it's not in your control

Built by a practising Chartered Accountant · Unlimited users · Free for 60 days

app.remindoo.co · Detailed task creation

Quick answer

Sending client data and instructions through WhatsApp or personal email means it leaves your systems entirely, with no record of what was shared, when, or with whom, and no way to remove it if someone leaves. UK firms outsourcing accounting work should keep documents, notes and instructions inside a system with a client timeline and audit trail. Remindoo is built for this and is free for 60 days.

Why is WhatsApp and personal email a data risk when outsourcing?

Once client data leaves your practice management system through a personal messaging app or inbox, you lose visibility, control and the ability to remove it later.

It's easy to see why WhatsApp becomes the default: it's fast, familiar and works across time zones without friction. The problem is what it doesn't do — there's no client record attached to the message, no audit trail of what was shared, and no way for the UK office to see the conversation unless someone happens to forward it on.

Personal email carries the same risk in a different shape. A spreadsheet of client financial data attached to a personal Gmail account sits outside every control the firm has, on a device the firm doesn't own, for as long as that person's inbox exists.

What goes wrong when work moves through chat apps and personal inboxes

A UK firm's offshore bookkeeper needs a bank statement clarified quickly, so she WhatsApps a UK team member a screenshot of the client's transaction list to ask a question. It's the fastest way to get an answer, and nobody thinks twice about it.

The screenshot now exists on two personal phones, outside any system the firm controls, with no record in the client file that it was ever sent. If either phone is lost, sold or backed up to a personal cloud account, that client's transaction data goes with it.

Later, the firm can't say with confidence how much client data has moved through personal WhatsApp and email over the past year, because none of it was ever logged anywhere central — it only happened where messages happened to be sent.

Signs you've lost control

  • Offshore team members ask clarifying questions over WhatsApp rather than on the task
  • Screenshots of client documents exist on personal phones
  • Work instructions are emailed to personal addresses rather than logged in the practice system
  • Nobody can say how much client data has left the firm's systems this way
  • There's no policy telling staff where client data may and may not be discussed
  • The firm relies on trust rather than technical restriction to keep this from happening

How to move client work off WhatsApp and personal email

  1. 1

    Put every instruction on the task

    Discuss work on the task itself, so every conversation sits in the task history rather than a separate chat app.

  2. 2

    Attach documents to the task, not a message

    Use attachments on the task or subtask instead of emailing files to a personal or offshore inbox.

  3. 3

    Share with clients through a portal

    Use the client portal for document sharing so client files never need to leave the system as email attachments.

  4. 4

    Write a short usage policy

    State plainly that client data must not be discussed or shared on personal messaging apps, and explain why.

  5. 5

    Give the offshore team a reason to stop using WhatsApp

    If the practice system is faster and easier for their actual questions, the habit of defaulting to WhatsApp fades naturally.

  6. 6

    Check in on real usage, not just the policy

    Ask the offshore team lead periodically whether questions are still landing on WhatsApp, and address it early if they are.

Who owns each step of an outsourced job?

  1. 1. Assign

    UK office

    The UK office assigns the task with full instructions and attachments in one place.

  2. 2. Prepare

    Offshore team

    Questions and clarifications are added as notes or comments on the task, not sent by WhatsApp.

  3. 3. Review

    UK reviewer

    The reviewer reads the full task history, so nothing was discussed anywhere they can't see.

  4. 4. Approve

    UK partner

    The partner approves the finished task, confident the whole conversation is on record.

  5. 5. Send

    UK office

    Any client-facing output is sent through the practice's own email templates or the client portal.

How does Remindoo keep client data off WhatsApp and personal email?

Remindoo gives every job a task with notes, attachments and a full history, so there's rarely a reason to reach for WhatsApp or a personal inbox to ask a question or share a file. Discuss work on the task itself, so every conversation sits in the task history rather than scattered across chat apps. The client portal handles document sharing with clients directly, keeping files out of email threads. Client timeline shows the history of tasks, services and communications, giving the UK office one place to see what's happened on a client rather than piecing it together from separate apps. Real-time notifications mean the offshore team doesn't need WhatsApp to know when something needs their attention. It's free for 60 days, so you can move your next batch of jobs off chat apps and into one system.

What changes when you move off email and WhatsApp?

AreaEmail, WhatsApp and spreadsheetsRemindoo
Clarifying questionsSent by WhatsAppAdded as notes on the task
Document sharing with offshoreEmailed or messagedAttached to the task
Document sharing with clientsEmail attachmentsClient portal
Record of conversationsScattered across appsClient timeline in one place
Alerting the offshore teamChat app pingsReal-time notifications in the system
Visibility for UK officeOnly what gets forwarded onFull task and client history

See your offshore set-up working

A 30-minute walkthrough of teams, roles, time budgets and review steps.

Book a Demo

Why does WhatsApp keep being used even after a policy says not to?

Because it's usually faster in the moment than the alternative — the fix is making the practice system genuinely quicker to use for quick questions, not just banning the app.

A written policy alone rarely changes behaviour if the sanctioned route is slower. If getting an answer through the task takes three extra clicks and a WhatsApp message takes one, people will default to WhatsApp under deadline pressure regardless of what the policy says.

The practical fix is making sure the task itself is where quick questions naturally belong — notifications reach the right person fast, and the note is visible to everyone who needs it, not just the two people in the WhatsApp thread.

Free resourceTransfer risk assessment checklistWork through where client data currently travels outside your systems and close the gaps.

Frequently asked questions

Is WhatsApp ever acceptable for work chat with an offshore team?

General, non-client conversation is lower risk, but any client data, document or identifying detail should stay inside the practice system where there's a record of it.

What's the actual risk if client data is sent over WhatsApp?

It leaves the firm's control entirely — it may be backed up to personal cloud storage, remain on a device after someone leaves, or simply be unrecoverable if you ever need to show what was shared.

Does a policy banning WhatsApp actually work?

On its own, not reliably — it works best combined with a practice system that's genuinely quicker to use for the same questions.

How do we handle urgent questions from the offshore team out of hours?

Real-time notifications on the task can flag urgency without needing a separate messaging channel outside the system.

Should clients be told if their data has been shared this way in the past?

That depends on the specifics and is a professional judgement call — take advice, and use it as the reason to close the gap going forward regardless.

Can documents be shared with clients without email at all?

Largely yes, using the client portal for document sharing rather than sending attachments by email.

Ready to run a calmer practice?

See Remindoo with your own clients, or start free for 60 days with unlimited users.

Sources

Last updated: . General guidance.

Why consistent client communication matters

Much of an accountant's week goes on chasing records and answering the same questions. Standard messages and timely reminders cut that chasing down.

Records arrive sooner

Reminders sent well before a deadline give clients time to send what you need.

Professional and consistent

Templates keep tone, content and deadlines accurate, whoever sends the email.

Less manual work

Tokens merge client details into messages, so one template works for every client.

A clear audit trail

Sent messages recorded on the client timeline show what was asked for and when.

Practical tips from UK practice

  • Send the first records request at least six weeks before the internal deadline.
  • Keep reminder emails short, with one clear action and a date.
  • Review templates each tax year so dates and rules stay current.
  • Use bulk emails for practice-wide updates such as new rules or office closures.

Written and reviewed by Waqas Sagar ACA FCCA FMAAT, Chartered Accountant with 18+ years in practice. Founder and MD of Accotax, an ICAEW, ACCA and AAT regulated London practice that has served over 5,000 clients, and founder of Remindoo. Guidance is general; check current GOV.UK and professional body guidance for your firm.

What UK practices say about Remindoo

Read all reviews on Trustpilot
“With Remindoo, everything from the first enquiry to onboarding and ongoing client management is tracked in one place… It saves us hours and gives me, as a practice owner, complete visibility of where the firm stands.”
Shaz Israr
“The biggest benefit is having clients, tasks, deadlines, workflows, proposals and communication all organised in one place.”
Taxaccolega Chartered Accountants
“During my trial, the team were absolutely amazing. They helped onboard my clients, set up my settings and made sure everything was ready for me to use… they made the whole process completely stress-free.”
Afia Begum
“It brings client information, tasks, recurring deadlines, workflows and reminders together in one place, giving us much better visibility across the team.”
Premier Books Consultancy Ltd

Trusted by firms regulated by the following professional bodies